Vulnerabilities > Oneblog Project

DATE CVE VULNERABILITY TITLE RISK
2022-01-25 CVE-2021-46085 Incorrect Default Permissions vulnerability in Oneblog Project Oneblog
OneBlog <= 2.2.8 is vulnerable to Insecure Permissions.
network
low complexity
oneblog-project CWE-276
6.5
2022-01-19 CVE-2021-46025 Cross-site Scripting vulnerability in Oneblog Project Oneblog
A Cross SIte Scripting (XSS) vulnerability exists in OneBlog <= 2.2.8.
network
low complexity
oneblog-project CWE-79
5.4